Uncontrolled Search Path Element Vulnerability in Vyaire Medical CareFusion Upgrade Utility

CVE-2018-5457 · MEDIUM Severity

AV:L/AC:M/AU:N/C:C/I:C/A:C

A uncontrolled search path element issue was discovered in Vyaire Medical CareFusion Upgrade Utility used with Windows XP systems, Versions 2.0.2.2 and prior versions. A successful exploit of this vulnerability requires the local user to install a crafted DLL on the target machine. The application loads the DLL and gives the attacker access at the same privilege level as the application.

Learn more about our User Device Pen Test.